1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Event ID 4625, with weird source network address

Discussion in 'General Security' started by bradly, Apr 1, 2009.

Thread Status:
Not open for further replies.
  1. bradly

    bradly Thread Starter

    Joined:
    Feb 10, 2005
    Messages:
    773
    Hi Security Guru's,
    I am getting continuous failed logon events (4625) on our Server 2008. I can see the User and Computer name, and they are legitimate, but the Source Network Address is not an IP address, but rather a hex-type number like this (i've put in the # signs): fe##::1fb:####:4864:####

    The User is not trying to login, so I want to find out where this is coming from.

    How do I trace the Source Network Address?

    Thanks in Advance!

    Brad
     
  2. lotuseclat79

    lotuseclat79

    Joined:
    Sep 12, 2003
    Messages:
    20,583
    By (i've put in the # signs) do you mean the original SNA was fe::1fb:4864 ? If not, what was the original SNA?

    -- Tom
     
  3. bradly

    bradly Thread Starter

    Joined:
    Feb 10, 2005
    Messages:
    773
    Here is the original message:
    Network Information:
    Workstation Name: HPDV6575-01
    Source Network Address: fe80::1fb:87af:4864:d6a8
    Source Port: 51110
    Detailed Authentication Information:
    Logon Process: NtLmSsp
    Authentication Package: NTLM
    Transited Services: -
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/814799

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice